ShellCodeX
Tools โ€ข Events โ€ข News โ€ข Insights
Threat Group Profile

Icarus

Dormant / historical
Victim claims 12
First seen May 2026
Last activity 23 Jun 2026
Tracked since May 2026

Preferred targets

Technology ยท 3 Business Services ยท 2 Financial Services ยท 2

Most targeted countries

US ยท 2 CA ยท 1 ID ยท 1

Victim Claims Timeline

Back to radar
Unknown

H*

Salesforce data of H*. Data stolen: SF data - Compressed

Unknown

H**

Salesforce data for this corp. Data stolen: SF data - compressed

Unknown

G*

Salesforce data for this corp. Data stolen: SF data - compressed

Unknown

C*

Salesforce data for this corp. Data stolen: SF data. Compressed size.

๐Ÿ‡บ๐Ÿ‡ธ United States

Huntress

Salesforce data of Huntress. Data stolen: SF data - Compressed

Technology
Unknown

HDS (Hdscorp)

Salesforce data for this corp. Data stolen: SF data - compressed

Unknown

Gms-net

Salesforce data for this corp. Data stolen: SF data - compressed

Technology
Unknown

Cqcrm

Salesforce data for Cqcrm Data stolen: SF data - compressed

Business Services
Unknown

Cbassociations

Salesforce data for this corp. Data stolen: SF data. Compressed size.

Business Services
๐Ÿ‡จ๐Ÿ‡ฆ Canada

Klue.com

Klue.com

As you've probably already heard, ***.com has been impacted by us recently. A number of other companies' Salesforce instances, which were partners to Klue, were exfiltrat...

Technology
๐Ÿ‡บ๐Ÿ‡ธ United States

thecreditpros.com

thecreditpros.com

TheCreditPros' Salesforce instance was breached and 263MB of data were taken from it, including: 01_input_fullcards.csv - 51,691 lines of full-info credit/debit cards:...

Financial Services
๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesia

Cazh.id

bkdp.cazh.id

- User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for https://bkdp.cazh.id/. - KYC Vault: 7,800 Government IDs + 4,200 Selfies (including "Hold-to-Face" ID s...

Financial Services